feee3b596e7bba4abac4256ec973fff3d17a802e712e6a5b59a3a34b2c83bd04 | Triage

Sharing

General

Target

55030c9b1b6da4d940f38084e7875f00N.exe
Size

54KB
Sample

240803-fyxy5svapk
MD5

55030c9b1b6da4d940f38084e7875f00
SHA1

b1bbe8f6c81fe5297e8aa5d2c4075e99f119265e
SHA256

feee3b596e7bba4abac4256ec973fff3d17a802e712e6a5b59a3a34b2c83bd04
SHA512

c474fc67d7ebc90c0f4936c8de381af7a7bd216bce170703c47d09ecbeef02a68b962f53e6638353072a48dc4943e2dac4a978e5306762f5dc467598f2db2a20
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFkTfq9TfqBXxX2:W7ZppApBULcfpHLcfpyDc2wXxX2

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  55030c9b1b6da4d940f38084e7875f00N.exe
- Size
  
  54KB
- MD5
  
  55030c9b1b6da4d940f38084e7875f00
- SHA1
  
  b1bbe8f6c81fe5297e8aa5d2c4075e99f119265e
- SHA256
  
  feee3b596e7bba4abac4256ec973fff3d17a802e712e6a5b59a3a34b2c83bd04
- SHA512
  
  c474fc67d7ebc90c0f4936c8de381af7a7bd216bce170703c47d09ecbeef02a68b962f53e6638353072a48dc4943e2dac4a978e5306762f5dc467598f2db2a20
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFkTfq9TfqBXxX2:W7ZppApBULcfpHLcfpyDc2wXxX2
Score

9^/10

discovery ransomware
- Renames multiple (400) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware